Microsoft patents faster network encryption using parallel processing
Microsoft has filed a patent for a method that speeds up network security by splitting encrypted data into smaller groups. These groups are processed simultaneously by different computer parts, then reassembled in the correct order before being sent.
In the filing’s own words
A computerized method processes network packets in parallel. Packets are obtained from network traffic of a network tunnel. The packets are distributed between two input queues, wherein each input queue is associated with a dedicated packet processing branch that can operate in parallel with other packet processing branches. Packets from the input queues are processed using dedicated packet processors (e.g., dedicated CPU core(s) and/or other dedicated processing entities) and the resulting processed packets are added to associated output queues. Packet order information is used to maintain the proper packet order across the multiple packet processing branches such that, when the processed packets from the multiple output queues are combined into a single processed packet flow or stream, the packets are in the same order as when they entered the network tunnel. After the processed packets are combined, they proceed along the network tunnel.
What exactly they claim (claim 1)
1. A system comprising: a processor; and a memory comprising computer program code, the memory and the computer program code configured to cause the processor to: add a first subgroup of packets of a group of packets from a network traffic tunnel to a first input queue; add a second subgroup of packets of the group of packets to a second input queue; process the first subgroup of packets using a first cryptographic processor; process the second subgroup of packets using a second cryptographic processor, wherein the first cryptographic processor and second cryptographic processor process packets in parallel; add processed packets from the first cryptographic processor to a first output queue using first packet order information associated with the first subgroup of packets; add processed packets from the second cryptographic processor to a second output queue using second packet order information associated with the second subgroup of packets; combine the processed packets from the first output queue and the processed packets from the second output queue into processed network traffic using the first packet order information and the second packet order information; and send the processed network traffic along the network traffic tunnel.
Facts
- Company
- Microsoft (Microsoft Technology Licensing, LLC)
- Official title
- PARALLEL IPSEC PROCESSING USING PROCESSOR CORES AND QUEUING LOGIC
- Publication number
- US20260291919A1
- Application number
- 19088955
- Filed
- Mar 24, 2025
- Published
- Sep 24, 2026
- Inventors
- 1
- Claims
- 20
Classified under
H04L 63/029 Electricity & electronicsH04L 47/6225 Electricity & electronicsH04L 63/0435 Electricity & electronicsMore from Microsoft in Networks & wireless
- Microsoft patents camera-based data transfer between server displays Sep 22, 2026
- Microsoft patents system that uses AI to plan network capacity Oct 13, 2026
- Microsoft patents method to spot cloud outages by checking individual user traffic Sep 10, 2026
- Microsoft patents hand gestures to control devices without menus Sep 24, 2026
- Microsoft patents image-based method to detect phone tethering Oct 1, 2026
Summaries are simplified from the filing’s own abstract and first claim. A patent filing is not a product announcement.
Patent data and drawings: U.S. Patent and Trademark Office (USPTO). Nebula is not affiliated with or endorsed by the USPTO.